Skip to content

Bump the go-modules group across 1 directory with 14 updates - #315

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-40233f22f3
Closed

Bump the go-modules group across 1 directory with 14 updates#315
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-40233f22f3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 11 updates in the / directory:

Package From To
github.com/argoproj/argo-cd/v3 3.4.5 3.5.0
github.com/getsops/sops/v3 3.13.2 3.13.3
golang.org/x/text 0.40.0 0.41.0
k8s.io/api 0.36.2 0.36.3
k8s.io/apiextensions-apiserver 0.36.2 0.36.3
k8s.io/cli-runtime 0.36.2 0.36.3
k8s.io/kube-aggregator 0.36.2 0.36.3
k8s.io/kube-proxy 0.36.2 0.36.3
k8s.io/kubectl 0.36.2 0.36.3
k8s.io/kubelet 0.36.2 0.36.3
k8s.io/kubernetes 1.36.2 1.36.3

Updates github.com/argoproj/argo-cd/v3 from 3.4.5 to 3.5.0

Release notes

Sourced from github.com/argoproj/argo-cd/v3's releases.

v3.5.0

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

  • be19446a015a33ba33bb91a0029b984d394ae1a7: feat(Jitter): Add Configurable Jitter for Webhook-Triggered application Refreshes (#25433) (@​adityaraj178)
  • 5b3073986f50b6775ea6ddef8d83aff05284eece: feat(appset): add concurrency when managing applications (#26642) (@​rumstead)
  • 29fd8db39ac979e4dcf2611fb9716ee14a632454: feat(appset): filtering repos by archived status #20736 (#21505) (@​prune998)
  • 57942cef9091e732b1ab6c158201f1d9728044db: feat(cli): Add support for Source Integrity configuration (#26997) (@​olivergondza)
  • 3cc6ba749640dfd3a4d9ed4d73ec44c29c38e7df: feat(cli): add --app-namespace flag to missing argocd app subcommands (#27942) (@​Mangaal)
  • 0e729cce3474818bf19e8deb6ff015fffe3fed7d: feat(cli): add appset-namespace for appset command (#27022) (@​Mangaal)
  • 744983be594fbf0bc651b28d639235b758a6c7a9: feat(health): Add healthcheck for gardener "Shoot" resources (#25750) (@​Sven1410)
  • 6cc786d056d77c6d0f24a384c1d0809ef6a87258: feat(health): add GatewayClass health check (#26591) (@​dnfwlq8054)
  • eabd4d64041dad10b3e1d500e0f13f1f66ce3394: feat(health): add pause and unpause actions to psmdb resource (#27616) (@​KyriosGN0)
  • daadf868db028bacde40e008524ba89d49b0dc8e: feat(health): additional promoter.argoproj.io health checks (#27170) (@​crenshaw-dev)
  • 4b69a7f468850bee3897e660ef0a4cff09b913d9: feat(health): finalizer messages for Promoter checks (#27478) (@​crenshaw-dev)
  • 289a4c01dbf67aa520a3ae973da74080689650a3: feat(health): support BackendTLSPolicy.gateway.networking.k8s.io (#27385) (@​snorwin)
  • 4cdc650a581cc92d393b50daf396c90de12d0e09: feat(helm): support wildcard glob patterns for valueFiles (#26768) (@​nitishfy)
  • f7a7deb8d7dcb9c95957a425f26a4bbf23be04ad: feat(hydrator): dynamically manage README template from argocd-cm ConfigMap [updated] (#19067) (#24309) (@​gyu-young-park)
  • 86936e24c5f7c739d89bc8692d286355ae749086: feat(hydrator): make manifest hydration queue concurrency configurable (#27926) (#27948) (@​GuruduGanesh)
  • 2308e17da20423c82525e59b1a974673594be2fe: feat(hydrator): opt-in source integrity verification for dry sources (Alpha) (#19302) (#28084) (@​mladjan-gadzic)
  • bf1591de63e39b7c3be5f5ba54abe8763de1a48c: feat(hydrator): support syncSource repoURL for separate destination repo (#27011) (@​boostrack)
  • 41b6fee59d67b8ba22bba995a7c0bbc44eb2512f: feat(impersonation): allow to disable strict enforcement (#27084) (cherry-pick #27573 for 3.5) (#28595) (@​argo-cd-cherry-pick-bot[bot])
  • 0c0140ce3e9fc4e9b1137c898e9304318c14e201: feat(metrics): add parallelism limit repo server (#27911) (@​pjiang-dev)
  • 7d2eb7722fba79be7b3745f0ced39e9301a9a407: feat(renovate): clean up config and remove github app (#27738) (@​rumstead)

... (truncated)

Commits
  • e95e1be chore: bump version to 3.5.0 on release-3.5 branch (#29045)
  • e4fe7f6 fix(appset): don't release finalizer while children still terminate (cherry-p...
  • 771e096 chore(deps): bump js-yaml from 3.14.1 to 5.2.0 in /ui (#28509) (#28947)
  • 7660efb chore: bump version to 3.5.0-rc3 on release-3.5 branch (#28938)
  • fd30e59 test: fix commit-server missing argocd in path (cherry-pick #28876 for 3.5) (...
  • a62624a fix(diff): don't drop manager-owned descendant fields when filtering webhook ...
  • b6bff3b fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (cherr...
  • 0b42a6d fix(helm): pass registry passwords through stdin (Cherry-Pick) (#28834)
  • bc5d359 fix(ui): update cluster count logic in ApplicationsSummary (cherry-pick #2876...
  • 061bd2b fix: only do annotation backfill if live unset (cherry-pick #28770 for 3.5) (...
  • Additional commits viewable in compare view

Updates github.com/getsops/sops/v3 from 3.13.2 to 3.13.3

Release notes

Sourced from github.com/getsops/sops/v3's releases.

v3.13.3

Installation

To install sops, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.linux.amd64
Move the binary in to your PATH
mv sops-v3.13.3.linux.amd64 /usr/local/bin/sops
Make the binary executable
chmod +x /usr/local/bin/sops

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.checksums.sigstore.json
Verify the checksums file
cosign verify-blob sops-v3.13.3.checksums.txt 
--bundle sops-v3.13.3.checksums.sigstore.json 
--certificate-identity-regexp=https://github.com/getsops 
--certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

# Verify the binary using the checksums file
sha256sum -c sops-v3.13.3.checksums.txt --ignore-missing

Verify artifact provenance

The SLSA provenance of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named sops-v3.13.3.intoto.jsonl. To verify the provenance of an artifact, you can utilize the slsa-verifier tool:

# Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.intoto.jsonl
</tr></table>

... (truncated)

Changelog

Sourced from github.com/getsops/sops/v3's changelog.

3.13.3

Improvements:

Bugfixes:

  • Fix a bug introduced in 3.13.2 that computes a wrong MAC during decryption for sequences (YAML lists) that contain a comment (#2245).
  • Fix completion subcommands so that they do not have an empty line before the shebang (#2253).

Project changes:

  • CI dependency updates (#2241, #2250, #2260).
  • Rust dependency updates for functional tests (#2259).
Commits
  • 26e2f47 Merge pull request #2249 from felixfontein/release-3.13.3
  • 357de8a Fix old changelog.
  • 73f38b8 Add changelog.
  • 74428b6 Bump version to 3.13.3.
  • f5fe6ab Merge pull request #2253 from felixfontein/completion
  • 238f71b Remove leading newline.
  • 5a745f3 Merge pull request #2248 from felixfontein/deps
  • f406e83 Update dependencies with 'go get -t -u ./...'.
  • 7149e91 Merge pull request #2259 from getsops/dependabot/cargo/functional-tests/rust-...
  • fefb6ee build(deps): Bump the rust group in /functional-tests with 3 updates
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.40.0 to 0.41.0

Commits
  • acdba66 go.mod: update golang.org/x dependencies
  • 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
  • See full diff in compare view

Updates k8s.io/api from 0.36.2 to 0.36.3

Commits
  • 3fde3c4 Update dependencies to v0.36.3 tag
  • 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.2 to 0.36.3

Commits
  • 2e78d6f Update dependencies to v0.36.3 tag
  • 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • c8a9346 Add e2e test for setting maps and slices to null via SSA
  • b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.36.3

Commits
  • 40bf4b2 Update dependencies to v0.36.3 tag
  • 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/cli-runtime from 0.36.2 to 0.36.3

Commits
  • a39fac4 Update dependencies to v0.36.3 tag
  • 88a785e Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 1706906 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/client-go from 0.36.2 to 0.36.3

Commits
  • 44a8af2 Update dependencies to v0.36.3 tag
  • f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/code-generator from 0.36.2 to 0.36.3

Commits
  • f4c4331 Update dependencies to v0.36.3 tag
  • f2be266 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 415a84d Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/kube-aggregator from 0.36.2 to 0.36.3

Commits
  • 08f9497 Update dependencies to v0.36.3 tag
  • 6428248 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 7de9fef Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/kube-proxy from 0.36.2 to 0.36.3

Commits
  • 5bfb40f Update dependencies to v0.36.3 tag
  • 76267a8 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 43529c4 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/kubectl from 0.36.2 to 0.36.3

Commits
  • 73fdc7a Update dependencies to v0.36.3 tag
  • 58802ae Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • fde8e27 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/kubelet from 0.36.2 to 0.36.3

Commits
  • bbb4f8f Update dependencies to v0.36.3 tag
  • cfd73d4 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 47a9920 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/kubernetes from 1.36.2 to 1.36.3

Release notes

Sourced from k8s.io/kubernetes's releases.

v1.36.3

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Commits
  • 0f29094 Release commit for Kubernetes v1.36.3
  • 8ba6370 Merge pull request #140581 from palnabarun/bump-go-1.36
  • cc4f7df Merge pull request #140663 from thc1006/dra/release-reserved-counters-backpor...
  • dec683b Merge pull request #140322HirazawaUi/automated-cherry-pick-of-#140163
  • 9419ebe Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 5874ee7 DRA: roll back reserved state in allocateDevice
  • 2c14a99 Bump images and versions to golang 1.26.5 and update distroless-iptables
  • fb2467e stop logging missing optional container annotations
  • 4434901 Add e2e test for setting maps and slices to null via SSA
  • f015292 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules group across 1 directory with 14 updates
993a5f2 
Bumps the go-modules group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/argoproj/argo-cd/v3](https://github.com/argoproj/argo-cd) | `3.4.5` | `3.5.0` |
| [github.com/getsops/sops/v3](https://github.com/getsops/sops) | `3.13.2` | `3.13.3` |
| [golang.org/x/text](https://github.com/golang/text) | `0.40.0` | `0.41.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.36.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.2` | `0.36.3` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.36.2` | `0.36.3` |
| [k8s.io/kube-aggregator](https://github.com/kubernetes/kube-aggregator) | `0.36.2` | `0.36.3` |
| [k8s.io/kube-proxy](https://github.com/kubernetes/kube-proxy) | `0.36.2` | `0.36.3` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.36.2` | `0.36.3` |
| [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.36.2` | `0.36.3` |
| [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.36.2` | `1.36.3` |



Updates `github.com/argoproj/argo-cd/v3` from 3.4.5 to 3.5.0
- [Release notes](https://github.com/argoproj/argo-cd/releases)
- [Changelog](https://github.com/argoproj/argo-cd/blob/master/CHANGELOG.md)
- [Commits](argoproj/argo-cd@v3.4.5...v3.5.0)

Updates `github.com/getsops/sops/v3` from 3.13.2 to 3.13.3
- [Release notes](https://github.com/getsops/sops/releases)
- [Changelog](https://github.com/getsops/sops/blob/main/CHANGELOG.md)
- [Commits](getsops/sops@v3.13.2...v3.13.3)

Updates `golang.org/x/text` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.40.0...v0.41.0)

Updates `k8s.io/api` from 0.36.2 to 0.36.3
- [Commits](kubernetes/api@v0.36.2...v0.36.3)

Updates `k8s.io/apiextensions-apiserver` from 0.36.2 to 0.36.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.36.2...v0.36.3)

Updates `k8s.io/apimachinery` from 0.36.2 to 0.36.3
- [Commits](kubernetes/apimachinery@v0.36.2...v0.36.3)

Updates `k8s.io/cli-runtime` from 0.36.2 to 0.36.3
- [Commits](kubernetes/cli-runtime@v0.36.2...v0.36.3)

Updates `k8s.io/client-go` from 0.36.2 to 0.36.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.2...v0.36.3)

Updates `k8s.io/code-generator` from 0.36.2 to 0.36.3
- [Commits](kubernetes/code-generator@v0.36.2...v0.36.3)

Updates `k8s.io/kube-aggregator` from 0.36.2 to 0.36.3
- [Commits](kubernetes/kube-aggregator@v0.36.2...v0.36.3)

Updates `k8s.io/kube-proxy` from 0.36.2 to 0.36.3
- [Commits](kubernetes/kube-proxy@v0.36.2...v0.36.3)

Updates `k8s.io/kubectl` from 0.36.2 to 0.36.3
- [Commits](kubernetes/kubectl@v0.36.2...v0.36.3)

Updates `k8s.io/kubelet` from 0.36.2 to 0.36.3
- [Commits](kubernetes/kubelet@v0.36.2...v0.36.3)

Updates `k8s.io/kubernetes` from 1.36.2 to 1.36.3
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](kubernetes/kubernetes@v1.36.2...v1.36.3)

---
updated-dependencies:
- dependency-name: github.com/argoproj/argo-cd/v3
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/getsops/sops/v3
  dependency-version: 3.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: k8s.io/api
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/code-generator
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/kube-aggregator
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/kube-proxy
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/kubectl
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/kubelet
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 17, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-modules-40233f22f3 branch August 17, 2026 18:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants